common-security-audit

SUSPICIOUS. The content is largely coherent with a security-audit skill and the static findings are benign documentation false positives, but the skill enables offensive security workflows and broad code/secret inspection. Install trust is mostly acceptable through official tooling, with moderate supply-chain risk from dependency-audit commands and project-local wrappers; the only notable inconsistency is the likely invalid `pod audit` reference.